$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: p1i04QEP2brNq+Mu0SVmmSGEXgflDiSNuTwtOPtPOCg= Subject key identifier: B4:06:17:85:BF:A0:D4:9E:6D:7A:03:34:7B:D7:C3:39:B9:DC:35:92 Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 0207 Signing time: Sat 09 Aug 2025 02:38:44 +0000 Manifest this update: Sat 09 Aug 2025 02:38:44 +0000 Manifest next update: Sat 16 Aug 2025 02:38:44 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: Wd7Xzyph+bXVYzawi3RRhO7GR+LK/jT46fGxBgeYc70=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: JoMqVSrjZm4JfXMaz6xrPhG5LHTOXjmhXw4j9hZGE8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: Aug 9 02:38:44 2025 GMT Not After : Aug 16 02:38:44 2025 GMT Subject: CN=6896b4b4-95e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b7:84:25:f5:25:b9:1a:ea:d6:0b:de:e7:33: 1e:73:b3:93:81:d8:ea:0b:05:f9:fc:e4:0a:83:2e: 88:4a:af:f8:7e:7b:52:e3:06:ff:7e:a6:b7:19:9f: b8:70:e4:c1:52:b8:87:65:b2:40:fa:bc:ea:8a:c6: 7f:e0:cf:98:37:1a:61:65:46:d7:d4:75:9f:17:5e: ae:a7:76:87:5e:98:4d:62:20:de:66:62:3d:d7:44: 6a:98:d5:79:b0:b8:0a:94:fd:ec:14:6b:6c:91:3c: e8:b0:d8:6b:8f:c3:65:ea:f6:71:c5:52:c0:65:ba: fc:0b:39:73:2b:f0:c3:6e:f1:e0:96:e0:e0:2b:a4: 83:48:2c:34:60:47:6c:cb:9e:f3:00:15:57:4b:5a: 03:24:f3:1e:61:bf:ce:a5:95:3b:ff:79:49:28:a1: e4:aa:c4:5f:1a:7a:5e:2a:95:66:d5:bb:72:c1:48: 43:be:df:52:03:32:6d:d4:b1:2f:09:ff:28:38:4e: 19:58:a9:c6:b2:9a:cd:72:77:be:d4:6b:70:c1:c9: 76:02:81:f3:cc:96:15:20:72:db:25:cd:1c:93:76: 2b:3e:8d:51:26:eb:16:8e:e3:d7:f1:78:3a:d1:4b: 55:dc:90:50:6c:b6:35:7b:1c:d1:db:19:09:a5:73: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:06:17:85:BF:A0:D4:9E:6D:7A:03:34:7B:D7:C3:39:B9:DC:35:92 X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:13:57:44:97:ba:9c:34:c5:ec:73:9e:e1:10:27:79:e2:9f: a3:fc:6e:e7:ef:f0:31:e7:55:43:2e:fc:8a:82:c8:dc:a9:84: d3:d8:d2:51:f9:c0:c2:ad:46:12:d2:97:f4:1c:30:08:15:98: 83:93:a9:fa:ba:6e:1d:4a:7b:9b:46:01:2e:ff:fc:7d:1e:c3: 69:cf:51:26:3c:34:49:7a:7b:7e:77:31:73:13:73:65:c4:34: 5c:b0:8d:9d:ce:bf:9c:be:35:52:70:b1:1d:dc:4b:4e:72:44: e0:f7:54:57:ca:e9:ad:c3:ff:14:2b:01:1a:b2:57:f7:70:73: e4:f7:b6:5f:91:5a:ab:7a:31:fa:37:40:f3:22:b0:15:fc:4f: a3:79:27:2c:29:80:25:81:28:8c:a2:6d:32:e9:dd:bb:c0:36: 24:89:24:2d:c9:4d:ba:b1:dc:52:12:fa:72:81:1c:e9:9a:83: 7e:2a:87:79:c8:02:d5:5c:f6:18:8b:28:35:41:9d:93:18:5e: e9:7a:b7:5b:f5:c3:3b:9a:cd:94:fa:9e:5b:65:02:ad:4c:0d: 0b:53:80:30:41:06:12:12:a1:e4:37:6c:bf:aa:7d:f4:f7:83: 5e:dc:72:02:a7:eb:4a:d6:34:69:15:3d:d4:6a:43:f1:9f:1a: 21:88:d2:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjUwODA5MDIzODQ0WhcNMjUwODE2MDIzODQ0WjAYMRYwFAYD VQQDEw02ODk2YjRiNC05NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LeEJfUluRrq1gve5zMec7OTgdjqCwX5/OQKgy6ISq/4fntS4wb/fqa3GZ+4 cOTBUriHZbJA+rzqisZ/4M+YNxphZUbX1HWfF16up3aHXphNYiDeZmI910RqmNV5 sLgKlP3sFGtskTzosNhrj8Nl6vZxxVLAZbr8CzlzK/DDbvHgluDgK6SDSCw0YEds y57zABVXS1oDJPMeYb/OpZU7/3lJKKHkqsRfGnpeKpVm1btywUhDvt9SAzJt1LEv Cf8oOE4ZWKnGsprNcne+1Gtwwcl2AoHzzJYVIHLbJc0ck3YrPo1RJusWjuPX8Xg6 0UtV3JBQbLY1exzR2xkJpXNCSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQGF4W/ oNSebXoDNHvXwzm53DWSMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyE1dEl7qcNMXsc57hECd54p+j/G7n7/Ax51VDLvyKgsjcqYTT2NJR +cDCrUYS0pf0HDAIFZiDk6n6um4dSnubRgEu//x9HsNpz1EmPDRJent+dzFzE3Nl xDRcsI2dzr+cvjVScLEd3EtOckTg91RXyumtw/8UKwEaslf3cHPk97ZfkVqrejH6 N0DzIrAV/E+jeScsKYAlgSiMom0y6d27wDYkiSQtyU26sdxSEvpygRzpmoN+Kod5 yALVXPYYiyg1QZ2TGF7perdb9cM7ms2U+p5bZQKtTA0LU4AwQQYSEqHkN2y/qn30 94Ne3HICp+tK1jRpFT3UakPxnxohiNIj -----END CERTIFICATE-----Generated at Sun Aug 10 05:39:29 2025 by rpki-client